Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
File:                     mVehWqmJPxyRW0SX6_kqijPV5Dk.mft (raw, json)
Hash identifier:          a9pGJ7sBPi/sSAhbC+GZCy4fXH0K9a77qrMPsMzRLIw=
Subject key identifier:   76:0D:A7:7C:70:2C:4B:C5:EC:70:F1:F5:BD:CA:DC:F6:C7:32:FC:EC
Authority key identifier: 99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
Certificate issuer:       /CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
Certificate serial:       0199FEB47CA43690806EC646C4DD2BD7C2A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
Manifest number:          0B4D
Signing time:             Sun 19 Oct 2025 23:01:05 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:05 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:05 +0000
Files and hashes:         1: WEMws9n6rUTkd5LM4QecvMz8r_U.roa (hash: CZHPbmXmn0MVwHpVyYpkHxFw9h7//57NzIqqFrYWcd8=)
                          2: mVehWqmJPxyRW0SX6_kqijPV5Dk.crl (hash: kutQRM4ZA8r/Ohu7l1T9KEWMkbU3PdWlkRHNDN08AM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:7c:a4:36:90:80:6e:c6:46:c4:dd:2b:d7:c2:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
        Validity
            Not Before: Oct 19 23:01:05 2025 GMT
            Not After : Oct 20 23:01:05 2025 GMT
        Subject: CN=760da77c702c4bc5ec70f1f5bdcadcf6c732fcec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:15:e0:f3:40:b3:4b:69:a9:7e:b2:4a:87:a3:
                    88:d9:4f:70:8b:a9:dd:cd:de:db:ce:62:ec:12:64:
                    eb:fa:85:40:32:87:3f:78:11:85:fa:c2:61:2a:b5:
                    1b:1d:1f:de:3d:0c:88:00:55:71:df:5c:2d:df:6a:
                    5a:2c:d7:e3:13:c4:0e:3f:79:24:46:56:54:c5:d5:
                    a0:ad:a7:8c:3e:07:65:d8:94:c4:f3:7e:49:df:b4:
                    2e:2f:45:83:f7:cf:ad:18:f3:c0:85:5a:38:19:47:
                    bc:56:ed:df:ba:2c:69:3c:28:56:89:fc:cb:75:07:
                    0f:9b:78:ad:a0:ca:c8:48:67:f2:8d:f3:a1:83:7c:
                    11:45:f9:a5:1b:54:b1:e6:7f:8a:6d:d9:ab:c3:a0:
                    fd:f3:1c:4c:3f:d5:3c:b4:69:d3:50:9a:4f:b0:58:
                    f2:75:bf:18:18:88:f5:25:68:9a:48:b2:45:37:98:
                    3c:ff:95:53:a3:34:fa:4e:cb:f0:f6:54:2c:32:4e:
                    03:13:41:32:b2:ed:a3:a8:44:13:46:95:da:69:e7:
                    e9:25:64:ab:48:cc:d2:b8:52:23:a1:30:81:95:3d:
                    31:42:9e:95:d7:ff:59:58:4c:9a:f0:87:37:db:da:
                    fa:33:bb:e7:59:0e:45:7c:52:36:93:8c:b5:0c:cc:
                    66:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0D:A7:7C:70:2C:4B:C5:EC:70:F1:F5:BD:CA:DC:F6:C7:32:FC:EC
            X509v3 Authority Key Identifier:
                keyid:99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f9:6e:f0:9c:de:b0:33:0e:22:4f:fc:0d:49:22:37:5d:2e:
         53:9b:05:7f:bc:86:37:84:34:42:c6:37:e1:a1:d7:d0:8d:49:
         10:47:5b:a7:8d:8b:51:7f:ae:ea:61:bf:e1:0b:e8:4f:6d:19:
         0a:82:59:5c:1a:79:36:f0:fc:89:61:bd:47:37:05:8a:d2:9a:
         bc:77:51:9c:11:41:0d:81:eb:9a:74:7f:c9:8a:50:32:1b:ab:
         95:45:ef:2a:7d:68:08:54:ea:6b:12:bb:43:05:44:5f:ae:e9:
         f9:e6:f0:56:17:b3:29:ff:79:2b:a3:bb:f0:2d:25:57:fc:e7:
         79:e7:1d:a0:65:d6:f5:19:d0:25:1a:13:c6:31:bf:d6:48:71:
         f6:1a:b3:13:4a:bc:a8:6d:5d:75:a4:0a:47:18:0d:91:34:0e:
         d4:b0:08:26:67:0f:4e:41:18:2b:0a:0f:89:22:01:0b:47:8b:
         62:bd:9d:9f:8c:48:99:5d:70:7a:a6:5d:a6:15:92:8e:65:6e:
         72:d7:0e:80:7e:25:35:7f:7b:82:b9:55:cd:f9:81:9d:46:be:
         16:f5:6b:e6:ea:d8:31:89:e3:6e:4c:ad:25:6c:ac:7b:09:5c:
         6f:54:93:a7:7a:fe:95:84:26:7d:73:9e:4f:fb:fb:e8:0e:e0:
         cc:f4:f2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:49:11 2025 by rpki-client